Vulnerabilities detected during scan

mmclimans — Tue, 11 Oct 2016 22:56:50 GMT

Hi all,

I ran a vulnerability scan on my Palo Alto this afternoon, and I am receiving the following vulnerability:

I am a little confused as to why I am receiving it since I have one TLS/SSL Service Profile (using TLSv1.2 strictly) that is setup to use a signed certificate from 3rd party CA. Moreover, I cannot find that certificate listed in the vulnerability anywhere on the firewall (the EMAILADDRESS=support@paloaltonetworks.com, CN=localhost, OU=Support, O=Palo Alto Networks, L=Sunnyvale, ST=CA, C=US). The only thing I am thinking is that I do have a self-signed certificate that I use to administer to my GlobalProtect satellites.

Any ideas on how I could patch this? Any tips or advice is much appreciated.

Re: Vulnerabilities detected during scan

reaper — Wed, 12 Oct 2016 07:27:08 GMT

that certificate is the self-signed certificate factory loaded onto the device pending replacement by a public certificate

did you scan your management interface or a dataplane interface with a management profile (this is the most common spot for you to encounter this certificate)

did you set the ssl/tls profile in the management configuration ?

topic Vulnerabilities detected during scan in General Topics

Vulnerabilities detected during scan

Re: Vulnerabilities detected during scan